Privacy Policy

1. Introduction

Buess Tabou Australia Pty Ltd (ABN: 12 345 678 901) ("we", "our", or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website buesstabou.com or use our tourism services.

This policy complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact details (name, email address, phone number, postal address)
• Identification information (date of birth, passport details for international tours)
• Payment information (credit card details, billing address)
• Travel preferences and requirements
• Medical information relevant to tour safety
• Emergency contact information
• Marketing preferences and communication history

2.2 Website Usage Information

When you visit our website, we automatically collect:

• IP address and browser information
• Pages visited and time spent on our website
• Referring website and search terms used
• Device information and operating system
• Location data (if enabled)

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your website experience. For detailed information about our cookie usage, please refer to our Cookie Policy.

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing and managing tourism services and bookings
• Processing payments and managing financial transactions
• Communicating with you about your bookings and services
• Ensuring safety and security during tours and activities
• Improving our services and website functionality
• Marketing our services (with your consent)
• Complying with legal obligations and regulatory requirements
• Resolving disputes and providing customer support

4. Legal Basis for Processing

We process your personal information based on:

• Contract performance: To fulfil our obligations under tour booking contracts
• Legitimate interests: To improve our services and communicate with customers
• Consent: For marketing communications and optional services
• Legal compliance: To meet regulatory and safety requirements
• Vital interests: To protect health and safety during emergencies

5. Information Sharing and Disclosure

We may share your information with:

5.1 Service Providers

• Tour operators and activity providers
• Accommodation and transport providers
• Payment processors and financial institutions
• IT service providers and website hosting companies
• Marketing and analytics service providers

5.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights and property
• Ensure safety and security of our customers and staff
• Investigate potential violations of our terms of service

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of sensitive data during transmission and storage
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure payment processing systems
• Regular backup and recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Maintain safety and security records

Marketing information is retained until you withdraw consent or request removal.

8. Your Rights

Under Australian privacy law, you have the right to:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Restriction: Request limitation of processing in certain circumstances
• Portability: Request transfer of your data to another provider
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for marketing communications

To exercise these rights, contact us using the details provided in Section 11.

9. International Data Transfers

Your information may be transferred to and processed in countries outside Australia, including:

• Countries where our service providers are located
• Destinations where you book tours or activities
• Cloud storage providers with international data centres

We ensure appropriate safeguards are in place for international transfers, including adequacy decisions, standard contractual clauses, or other approved mechanisms.

10. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

For family bookings involving minors, we require parental or guardian consent and may collect limited information about children for safety and booking purposes.

11. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

12. Complaints

If you believe we have breached your privacy, you may lodge a complaint with us using the contact details above. We will investigate your complaint and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our website

Your continued use of our services after such notification constitutes acceptance of the updated policy.

14. Third-Party Links

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit.